85 matches found
zz 安全漏洞
zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and earlier versions, which stems from improper handling of the file parameter in the /resolve file, resulting in unlimited uploads...
zz 注入漏洞
zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...
zz 代码问题漏洞
zz is an e-commerce platform for zj1983 individual developers. A code issue vulnerability exists in zz 2024-8 and prior versions, which stems from improper handling of the url parameter in the HTTP request handling component, leading to server-side request forgery...
zz 注入漏洞
zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...
zz 注入漏洞
zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-08 and prior versions, which stems from SQL injection and could lead to remote code execution...
zz 安全漏洞
zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions, which stems from cross-site scripting and could lead to remote code execution...
zz 安全漏洞
zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-08 and earlier versions, which stems from the presence of cross-site request forgery that could lead to remote code execution...
PT-2025-9190 · Unknown · Zfileaction
Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical vulnerability has been found in zj1983 zz, affecting some unknown processing of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.upload. The manipulation of the file argument leads to...
CVE-2024-10290
A vulnerability, which was classified as problematic, was found in ZZCMS 2023. This affects an unknown part of the file 3/qq-connect2.0/API/com/inc.php. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...
CVE-2024-44819
Cross Site Scripting vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via a crafted script to the pagename parameter of the admin/del.php component...
CVE-2024-44820
A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/Ebak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo function, which exposes detailed information about the PHP...
[ZZ-004] During the deprecation period where both .eth registrar controllers are active, a crafted hack can be launched and cause the same malicious consequences of [ZZ-001] even if [ZZ-001] is properly fixed
Severity: High Status: Has not been reported Description, Specifically, according to the documentation, there will be a deprecation period that two types of .eth registrar controllers are active. Names can be registered as normal using the current .eth registrar controller. However, the new .eth...
CVE-2022-24644
ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...
Remote code execution
ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...
ZZ Inc. KeyMouse Windows 安全漏洞
ZZ Inc. KeyMouse Windows is a keyboard and mouse from ZZ Inc. A security vulnerability exists in ZZ Inc. KeyMouse Windows 3.08 and earlier versions that originates from a remote code execution vulnerability during an unauthenticated update...
CVE-2022-24644
ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse...
CVE-2022-24644
CVE-2022-24644 affects ZZ Inc. KeyMouse Windows 3.08 and earlier. The vulnerability is a remote code execution that can be triggered when an affected KeyMouse installation performs an unauthenticated update. The root cause is tied to the update process, and exploitation requires triggering a prod...
Exploit for Download of Code Without Integrity Check in Zzinc Keymouse_Firmware
CVE-2022-24644 ZZ Inc. KeyMouse 3.08 Windows Unauthenticat...
ZZCMS SQL注入漏洞
ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS is vulnerable to SQL injection in 2021, which stems from a lack of validation of external input SQL statements in the askbigclassid parameter of /admin/ask.php in the application. An attacker could use this vulnerability ...